Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 779786262a Fix VPS GitLab + Nextcloud crash loops found during health sweep main Scooby Husky 2026-08-22 15:54:05 -05:00
• 9a9eb207b5 Revert workhorse TLS: broke public site on shared port 8181 Scooby Husky 2026-08-22 14:55:40 -05:00
• 1febd18bd6 Widen letsencrypt-production DNS-01 solver to cover ha.huskypup.net Scooby HuskyandClaude Sonnet 5 2026-08-22 14:25:36 -05:00
• bce3861083 GitLab cross-site replication Phase 2b: enable Gitaly + workhorse TLS Scooby HuskyandClaude Sonnet 5 2026-08-22 14:24:13 -05:00
• 166ff0ffb7 GitLab cross-site replication Phase 2b: home-side Gitaly network exposure Scooby HuskyandClaude Sonnet 5 2026-08-22 13:59:03 -05:00
• e73561e5ca Phase 2a verification: confirm git operations still work post-ConfigMap-patch Scooby HuskyandClaude Sonnet 5 2026-08-22 13:57:16 -05:00
• 6cf1d89278 GitLab cross-site replication Phase 2a (corrected): ignoreDifferences approach Scooby HuskyandClaude Sonnet 5 2026-08-22 13:54:43 -05:00
• a309495e1e Fix YAML syntax error from previous commit (leftover maxUnavailable line) Scooby HuskyandClaude Sonnet 5 2026-08-22 13:49:18 -05:00
• 38dad209e3 GitLab cross-site replication Phase 2a: Praefect config override mechanism Scooby HuskyandClaude Sonnet 5 2026-08-22 13:48:35 -05:00
• 4a0de188df GitLab cross-site replication Phase 1c (stage 2): live streaming replication Scooby HuskyandClaude Sonnet 5 2026-08-22 13:31:09 -05:00
• 83c06a888d GitLab cross-site replication Phase 1c (stage 1): VPS clusters as real replicas Scooby HuskyandClaude Sonnet 5 2026-08-22 13:19:43 -05:00
• ca94282552 GitLab cross-site replication Phase 1b: secret material sync Scooby HuskyandClaude Sonnet 5 2026-08-22 13:08:22 -05:00
• 04fa80ece3 GitLab cross-site replication Phase 1a: Postgres network plumbing Scooby HuskyandClaude Sonnet 5 2026-08-22 12:47:03 -05:00
• a104008111 Add VPS GitLab mirror-sync CronJob for Homelabv4 repo Scooby HuskyandClaude Sonnet 5 2026-08-20 23:55:20 -05:00
• d99b560cec Loosen VPS GitLab sidekiq liveness probe further (~17min grace) Scooby HuskyandClaude Sonnet 5 2026-08-20 23:39:49 -05:00
• a9039e0723 Set Recreate deployment strategy for VPS GitLab webservice/sidekiq Scooby HuskyandClaude Sonnet 5 2026-08-20 23:16:56 -05:00
• 1ab292e185 Fix GitLab Authentik SSO: restore providers list, populate real provider key Scooby HuskyandClaude Sonnet 5 2026-08-20 23:14:25 -05:00
• 59bff07a53 Loosen VPS GitLab webservice/sidekiq liveness probes, cut worker count Scooby HuskyandClaude Sonnet 5 2026-08-20 23:10:48 -05:00
• ab084715e6 Fix VPS GitLab ingress backend service name Scooby HuskyandClaude Sonnet 5 2026-08-20 22:47:48 -05:00
• 989d42dd50 Fix GitLab OIDC secret FailedMount blocking webservice/sidekiq startup Scooby HuskyandClaude Sonnet 5 2026-08-20 22:36:16 -05:00
• 6a335132fe VPS GitLab: disable upgradeCheck hook (breaks fresh installs via ArgoCD) Scooby HuskyandClaude Sonnet 5 2026-08-20 21:18:13 -05:00
• 5670a941d4 Deploy real GitLab on the VPS (not just Gitea) Scooby HuskyandClaude Sonnet 5 2026-08-20 21:04:48 -05:00
• 220cdfb00a VPS-standby: force HTTPS redirect on all 5 Traefik ingresses Scooby HuskyandClaude Sonnet 5 2026-08-20 20:58:40 -05:00
• bb749b32b9 Fix VPS Vault OIDC login: missing redirect_uri + missing DNS Scooby HuskyandClaude Sonnet 5 2026-08-20 20:33:22 -05:00
• d9a4c16481 Move all 8 Authentik OIDC client_secrets out of plaintext git Scooby HuskyandClaude Sonnet 5 2026-08-20 20:04:22 -05:00
• c6d4294be6 Widen mTLS PERMISSIVE/AuthorizationPolicy to cover port 61432 too Scooby HuskyandClaude Sonnet 5 2026-08-20 18:51:42 -05:00
• 185e9c292e Fix real cause of VPS authentik's DB timeout loop + repo secrets cleanup Scooby HuskyandClaude Sonnet 5 2026-08-20 18:47:50 -05:00
• cfbe844ecd Repoint CoreDNS rewrite at ha-authentik-postgres (has port 61432) Scooby HuskyandClaude Sonnet 5 2026-08-20 18:34:17 -05:00
• 8b8549e432 Add port 61432 to ha-authentik-postgres for home's local CoreDNS rewrite Scooby HuskyandClaude Sonnet 5 2026-08-20 18:34:01 -05:00
• da60230997 Bring kube-system/coredns under GitOps management Scooby HuskyandClaude Sonnet 5 2026-08-20 18:30:03 -05:00
• cbf7c07711 Vault -> VPS secret pipeline: replaces manual kubectl/ssh secret copies Scooby HuskyandClaude Sonnet 5 2026-08-20 18:26:26 -05:00
• f7a9a03816 authentik HA: floating DNS hostname + failover-watcher Scooby HuskyandClaude Sonnet 5 2026-08-20 17:43:08 -05:00
• 3e7643e67e authentik HA: fix Istio ambient mesh blocking VPS/witness streaming replication Scooby HuskyandClaude Sonnet 5 2026-08-19 00:47:34 -05:00
• a21a8601f3 Fix: replica.source is required unconditionally by the CNPG webhook Scooby Husky 2026-08-19 00:23:08 -05:00
• a095c27500 Fix CNPG distributed-topology validation errors Scooby Husky 2026-08-19 00:12:50 -05:00
• b77f0865d0 Wire CNPG streaming replication + distributed topology for pg-authentik pilot Scooby Husky 2026-08-19 00:08:23 -05:00
• a3e0ae3427 Fix etcd advertised WAN ports: 61379/61380, not 12379/12380 Scooby Husky 2026-08-19 00:01:31 -05:00
• c2f0f38012 Fix HA failover etcd: advertise via WAN port-forward, not the Netbird mesh IP Scooby Husky 2026-08-18 23:25:13 -05:00
• 5f52f2b36b Multi-site active failover pilot: home etcd member + Postgres NodePort exposure Scooby Husky 2026-08-18 21:12:45 -05:00
• 9b45cfd542 Widen VPS Authentik server liveness/readiness probes Scooby Husky 2026-08-18 19:01:01 -05:00
• 8e33cf0524 Fix n8n liveness probe: chart has no startupProbe, needs a longer runway Scooby Husky 2026-08-18 18:51:50 -05:00
• 08b8209455 Fix VPS Nextcloud DB connection (PGSSLMODE) and n8n probe timing Scooby Husky 2026-08-18 18:40:52 -05:00
• 444cb127bd Add missing n8n-main-persistence PVC on VPS Scooby Husky 2026-08-18 18:24:30 -05:00
• 5bc1be2f00 Replace DNS-flip failover watcher with static vps.huskypup.net subdomains Scooby Husky 2026-08-18 18:23:08 -05:00
• f98c997293 Vault OIDC login via Authentik: hostAlias + blueprint config Scooby Husky 2026-08-18 18:07:36 -05:00
• a1d6091122 Fix VPS replica clusters: match home's max_connections (recovery abort) Scooby Husky 2026-08-17 23:15:02 -05:00
• 6e054a46b6 Fix VPS replica clusters: barmanObjectStore serverName mismatch Scooby Husky 2026-08-17 22:56:51 -05:00
• a869a5a67f Add CNPG ScheduledBackup for authentik/n8n/nextcloud - WAL archiving alone isn't restorable Scooby Husky 2026-08-17 22:49:50 -05:00
• e86d5e1154 Fix vps-authentik presync: SA/Role/RoleBinding need PreSync hook ordering too Scooby Husky 2026-08-17 22:37:55 -05:00
• 85c916285e Phase 2: deploy n8n and Nextcloud warm standbys on the VPS Scooby Husky 2026-08-17 22:31:41 -05:00
• 1a657ad0a4 Phase 2: deploy Authentik warm standby on the VPS Scooby Husky 2026-08-17 22:28:10 -05:00
• f2213b56b4 Fix Gitea mirror: use service=git instead of service=gitlab Scooby Husky 2026-08-17 22:16:49 -05:00
• 777edf3895 Phase 2: deploy Gitea warm standby on the VPS Scooby HuskyandClaude Sonnet 5 2026-08-17 22:05:24 -05:00
• d6e8c2aa2d Optimize vault-restore: don't wait on condition=Ready (verified working already) Scooby HuskyandClaude Sonnet 5 2026-08-17 21:57:52 -05:00
• fb124201bb Fix vault-restore RBAC: add watch verb for kubectl wait Scooby HuskyandClaude Sonnet 5 2026-08-17 21:54:21 -05:00
• e2bdab8940 Fix vault-restore: authenticate raft snapshot restore with a real token Scooby HuskyandClaude Sonnet 5 2026-08-17 21:46:23 -05:00
• 62751f7d75 Fix vps-vault restore script: pod name is vps-vault-0, not vault-0 Scooby HuskyandClaude Sonnet 5 2026-08-17 21:43:26 -05:00
• d0c5563671 Phase 2: deploy Vault warm standby on the VPS Scooby HuskyandClaude Sonnet 5 2026-08-17 21:42:09 -05:00
• 8aed0bf98e Fix vault-raft-snapshot: mc download needs -L to follow redirects Scooby HuskyandClaude Sonnet 5 2026-08-17 21:15:40 -05:00
• 7206022a2b Pin VPS MinIO root credentials to a real Secret, fix regeneration bug Scooby HuskyandClaude Sonnet 5 2026-08-17 21:12:37 -05:00
• 7d73542645 Fix nextcloud-pvc-sync: add fsGroup for data access, fix restic cache dir Scooby HuskyandClaude Sonnet 5 2026-08-17 21:05:38 -05:00
• 7a6ecd14fe Bump rancher memory limit 2Gi -> 3Gi, was OOMKilling during restart recovery Scooby HuskyandClaude Sonnet 5 2026-08-17 21:01:48 -05:00
• 2fc7fb5b59 Fix Nextcloud Redis config: use externalRedis, not redis (bundled subchart toggle) Scooby HuskyandClaude Sonnet 5 2026-08-17 20:54:28 -05:00
• e2c8ef0fde Commit crowdsec-firewall-bouncer headless-service fix (was uncommitted) Scooby HuskyandClaude Sonnet 5 2026-08-17 20:51:47 -05:00
• 018eb3570f Build real pod-egress routing to the VPS, fix everything blocked by its absence Scooby HuskyandClaude Sonnet 5 2026-08-17 20:36:13 -05:00
• 07a59d3b34 Fix vault-raft-snapshot: detect active leader, suspend until VPS egress exists Scooby HuskyandClaude Sonnet 5 2026-08-17 19:56:12 -05:00
• e18308b750 Fix pg-n8n's long-recurring CNPG status-extraction error - missing AuthorizationPolicy rule Scooby HuskyandClaude Sonnet 5 2026-08-17 19:50:29 -05:00
• 2c8d29c51f Disable VPS MinIO backup on n8n/nextcloud/authentik CNPG clusters Scooby HuskyandClaude Sonnet 5 2026-08-17 19:45:04 -05:00
• ff638250d6 Disable CrowdSec online API - CAPI unreachable from home, egress routing gap found Scooby HuskyandClaude Sonnet 5 2026-08-17 19:37:33 -05:00
• c8643ca025 Add dedicated netbird router for crowdsec namespace Scooby HuskyandClaude Sonnet 5 2026-08-17 19:27:39 -05:00
• 33b0d018f9 Route CrowdSec CAPI/console-enroll traffic through VPS proxy Scooby HuskyandClaude Sonnet 5 2026-08-17 18:39:23 -05:00
• bbb80687ca Fix netbird-operator namespace reference in istio mesh policies Scooby HuskyandClaude Sonnet 5 2026-08-17 18:20:00 -05:00
• 3226169af8 Fix Vault kubernetes-auth reviewer token expiring 1hr after every boot Scooby HuskyandClaude Sonnet 5 2026-08-17 18:19:13 -05:00
• 9bb4ada1f5 Fix Redis CR permission denied on PVC (needs fsGroup) Scooby Husky 2026-08-17 17:20:16 -05:00
• a8b16fa4cb Fix Redis CR apiVersion/schema - v1beta2 doesn't exist, blocked whole nextcloud sync Scooby Husky 2026-08-17 16:56:20 -05:00
• 7b3669e9a6 Fix CNPG operator -> instance status communication + add CNPG health check Scooby Husky 2026-08-17 16:41:11 -05:00
• 99b8ca6be9 Fix Nextcloud OIDC client_id/secret - was hardcoded empty Scooby Husky 2026-08-17 16:33:47 -05:00
• 8372887ce1 Fix two long-standing bugs in the vault-init PreSync hook script Scooby Husky 2026-08-17 16:13:48 -05:00
• ee71e4f46f Fix DDNS/failover Cloudflare zone name and add restricted PSS securityContext Scooby Husky 2026-08-17 15:55:47 -05:00
• 983671ef50 Fix ArgoCD Redis connectivity broken by ambient mesh HBONE NetworkPolicy gap Scooby Husky 2026-08-17 15:08:33 -05:00
• 7990f1fa47 Add VPS warm-standby/backup site (Phase 0-1b) Scooby Husky 2026-08-17 14:59:26 -05:00
• 5163403e24 Scale down non-critical replicas for homelab resource savings Scooby HuskyandClaude Opus 4.6 2026-03-15 23:00:48 -05:00
• fa23e5084c Reduce GitLab latency: increase Gitaly CPU limit and Puma workers Scooby HuskyandClaude Opus 4.6 2026-03-15 22:47:39 -05:00
• a8b9064248 Set Grafana deployment strategy to Recreate for RWO PVC compatibility Scooby HuskyandClaude Opus 4.6 2026-03-15 22:33:16 -05:00
• ff00f666a0 Add privileged PodSecurity label to 8 namespaces for NetBird router Scooby HuskyandClaude Opus 4.6 2026-03-15 22:27:39 -05:00
• 02632d06a4 Fix NetBird service annotations: use netbird.io/expose for operator Scooby HuskyandClaude Opus 4.6 2026-03-15 16:25:35 -05:00
• 2edc8a156e Fix netbird-operator: add self-hosted management URL Scooby HuskyandClaude Opus 4.6 2026-03-15 16:08:51 -05:00
• 0c16785116 Fix Guacamole OIDC session persistence via Istio DestinationRule Scooby HuskyandClaude Opus 4.6 2026-03-15 15:11:15 -05:00
• f71dbdb689 Add Envoy Gateway cookie-based session persistence for Guacamole OIDC Scooby HuskyandClaude Opus 4.6 2026-03-15 14:55:53 -05:00
• b9fd5a9461 Add session affinity to Guacamole service for OIDC flow Scooby HuskyandClaude Opus 4.6 2026-03-15 14:47:25 -05:00
• e29eb9611b Make Authentik the primary login method for Guacamole Scooby HuskyandClaude Opus 4.6 2026-03-15 14:24:53 -05:00
• 987f91c877 Enable CephFS CSI driver for SMB gateway and CephFS volumes Scooby HuskyandClaude Opus 4.6 2026-03-15 12:27:00 -05:00
• 7eae427d1a Scale services to 2+ replicas for HA Scooby HuskyandClaude Opus 4.6 2026-03-15 03:08:49 -05:00
• 38b1c16c1e Update rook-ceph-operator chart to v1.19.2 and remove stale comment Scooby HuskyandClaude Opus 4.6 2026-03-14 21:25:22 -05:00
• 5d09fb86e7 Add GitLab Redis initializer ordering fix Scooby HuskyandClaude Opus 4.6 2026-03-14 20:26:24 -05:00
• c0fd93c73b Upgrade Ceph to v19.2.3 (Squid) Scooby HuskyandClaude Opus 4.6 2026-03-14 18:38:10 -05:00
• a93df9375a Add talos-cp-02 back to Rook-Ceph nodes list Scooby HuskyandClaude Opus 4.6 2026-03-14 16:31:13 -05:00
• 2643d5e0bf Fix TeslaMate DB corruption and Rook-Ceph reconcile hang Scooby HuskyandClaude Opus 4.6 2026-03-14 14:53:31 -05:00
• 8df30c11ee Re-enable Ceph dashboard SSL to fix SAML http/https URL mismatch Scooby HuskyandClaude Opus 4.6 2026-03-14 13:56:33 -05:00
• fb0ed0071f Set X-Forwarded-Proto header for Ceph dashboard SAML authentication Scooby HuskyandClaude Opus 4.6 2026-03-14 13:48:35 -05:00